$ rpki-client -vvf repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft File: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft (raw, json) Hash identifier: rgbCYKQvwXTxaEVxsylPD4sM4jZ5MHptVEDtkkMD9d4= Subject key identifier: E8:E3:D2:C7:0E:95:AD:70:67:B1:3F:8C:26:AE:CF:F6:80:E3:41:AE Authority key identifier: 6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF Certificate issuer: /CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Certificate serial: 6CD8185D902B4E3E2275E9D3C9E531D5F4423CAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft Manifest number: 03D0 Signing time: Tue 24 Mar 2026 06:42:00 +0000 Manifest this update: Tue 24 Mar 2026 06:37:00 +0000 Manifest next update: Fri 27 Mar 2026 17:49:00 +0000 Files and hashes: 1: 6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl (hash: cFYdoRq8Br6yhQ9qQOIwC83A9ZPhjoLwym9GFCeOP2w=) 2: 3130332e3136392e31302e302f32332d3234203d3e20313432333335.roa (hash: 0xPkP0aeNrz87Zm2U7QlyTbDxyUl/q+yySPJihN9ETc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d8:18:5d:90:2b:4e:3e:22:75:e9:d3:c9:e5:31:d5:f4:42:3c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF Validity Not Before: Mar 24 06:37:00 2026 GMT Not After : Mar 27 17:49:00 2026 GMT Subject: CN=E8E3D2C70E95AD7067B13F8C26AECFF680E341AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:70:82:f4:38:08:12:a7:9c:55:b2:ae:6e: 6f:25:b7:9f:b2:82:91:b4:65:15:62:26:59:db:74: 02:a9:5e:38:5f:c4:36:a7:0a:4e:98:6e:ba:ff:dd: 50:ce:d5:c8:14:9b:42:c6:0e:65:40:82:e6:66:fc: 6d:1e:41:9e:ea:c1:fd:9d:b4:ee:bc:58:a1:73:69: 06:ec:14:8f:fc:c7:02:11:18:db:91:e0:d9:ce:a2: af:43:aa:cf:3d:fe:1f:f4:c0:73:70:c5:dc:f9:a7: ae:be:b2:96:bc:9d:67:f4:c9:b5:8c:22:53:8b:22: 61:f5:db:74:f3:1c:b8:19:93:50:f1:41:28:0b:2a: 9b:a4:16:bd:7d:54:b9:d2:0c:a8:87:c7:45:bb:0e: a5:48:00:79:62:dc:21:a6:ad:58:eb:de:29:c8:78: 8c:37:6a:30:71:7b:89:e2:6d:f8:9d:86:00:9c:19: 15:67:fd:90:8d:83:08:fd:27:ea:cd:db:df:78:a0: 4b:a1:5e:eb:86:75:2e:4b:79:36:1f:8a:90:fd:bb: 56:36:d7:7f:f4:4b:6c:9e:94:89:3d:83:14:c2:91: 4f:c3:eb:73:da:d1:77:50:10:0f:36:08:e5:ee:1d: 24:6f:c2:e4:23:f3:03:cf:3d:81:49:8d:f1:d4:15: 43:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E3:D2:C7:0E:95:AD:70:67:B1:3F:8C:26:AE:CF:F6:80:E3:41:AE X509v3 Authority Key Identifier: keyid:6E:3C:89:E6:A3:E3:C6:1A:73:15:8A:3C:FF:82:90:9F:AE:F8:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0eaa8cbe-718b-4953-b789-60fa857aec8d/0/6E3C89E6A3E3C61A73158A3CFF82909FAEF8EDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:3d:bd:6e:0e:50:40:e3:e1:ec:05:13:14:df:75:11:b6:93: c6:39:a8:45:0d:e6:05:67:c1:5c:1d:1e:5d:09:0e:6b:f3:ae: 56:69:8a:b0:9a:82:15:c8:1d:a9:ef:ff:47:ac:77:14:bc:00: 98:2a:71:e6:d4:29:68:51:d3:e9:ea:60:21:73:1f:f8:9c:0b: b6:7c:4f:a9:47:e0:dd:bc:78:8f:fd:95:54:fe:67:84:43:68: 80:8d:1b:7c:01:86:0c:f6:f9:31:a0:42:01:32:f5:d9:cf:39: bb:30:52:a4:7e:47:bc:47:57:ec:8c:51:42:c2:fb:f8:37:48: 96:8c:07:28:b4:bb:75:33:ff:cd:16:2f:50:34:50:90:9b:de: 9b:b1:d5:2f:49:30:1f:7c:e6:5c:6d:e9:c1:98:ef:87:da:87: 01:84:65:50:fa:65:2b:7d:33:4f:08:66:da:82:33:bc:b8:2b: 13:4f:9b:90:de:74:dc:ae:fc:e5:7d:d0:bf:35:b3:f9:67:25: 5c:9c:ce:07:eb:05:3e:7a:f7:8d:29:d6:8d:15:c1:d0:48:22: b6:c8:16:fa:28:ff:d5:fa:76:93:89:3b:bf:d2:50:a2:c0:21: b2:dc:08:46:db:7d:ad:8c:c4:81:fe:18:e1:58:0d:d7:da:e8: 79:da:e7:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNgYXZArTj4idenTyeUx1fRCPKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZB RUY4RURFRjAeFw0yNjAzMjQwNjM3MDBaFw0yNjAzMjcxNzQ5MDBaMDMxMTAvBgNV BAMTKEU4RTNEMkM3MEU5NUFENzA2N0IxM0Y4QzI2QUVDRkY2ODBFMzQxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WXCC9DgIEqecVbKubm8lt5+y gpG0ZRViJlnbdAKpXjhfxDanCk6Ybrr/3VDO1cgUm0LGDmVAguZm/G0eQZ7qwf2d tO68WKFzaQbsFI/8xwIRGNuR4NnOoq9Dqs89/h/0wHNwxdz5p66+spa8nWf0ybWM IlOLImH123TzHLgZk1DxQSgLKpukFr19VLnSDKiHx0W7DqVIAHli3CGmrVjr3inI eIw3ajBxe4nibfidhgCcGRVn/ZCNgwj9J+rN2994oEuhXuuGdS5LeTYfipD9u1Y2 13/0S2yelIk9gxTCkU/D63Pa0XdQEA82COXuHSRvwuQj8wPPPYFJjfHUFUMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6OPSxw6VrXBnsT+MJq7P9oDjQa4wHwYDVR0j BBgwFoAUbjyJ5qPjxhpzFYo8/4KQn6747e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWFhOGNiZS03MThiLTQ5NTMtYjc4OS02MGZhODU3YWVjOGQvMC82RTNDODlFNkEz RTNDNjFBNzMxNThBM0NGRjgyOTA5RkFFRjhFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4MjkwOUZBRUY4 RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVhYThjYmUtNzE4Yi00OTUzLWI3 ODktNjBmYTg1N2FlYzhkLzAvNkUzQzg5RTZBM0UzQzYxQTczMTU4QTNDRkY4Mjkw OUZBRUY4RURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACY9vW4OUEDj4ewFExTfdRG2k8Y5qEUN5gVn wVwdHl0JDmvzrlZpirCaghXIHanv/0esdxS8AJgqcebUKWhR0+nqYCFzH/icC7Z8 T6lH4N28eI/9lVT+Z4RDaICNG3wBhgz2+TGgQgEy9dnPObswUqR+R7xHV+yMUULC +/g3SJaMByi0u3Uz/80WL1A0UJCb3pux1S9JMB985lxt6cGY74fahwGEZVD6ZSt9 M08IZtqCM7y4KxNPm5DedNyu/OV90L81s/lnJVyczgfrBT56940p1o0VwdBIIrbI Fvoo/9X6dpOJO7/SUKLAIbLcCEbbfa2MxIH+GOFYDdfa6Hna56c= -----END CERTIFICATE-----Generated at Thu Mar 26 12:44:57 2026 by rpki-client